Fallout in wordpress, this week

What we caught this week while monitoring over 163,107,774 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

MONDAY

Mon Sep 21 · 1 catch · 0 waves · 1 single
well-knownwell-known/appmetadata/packagemetadataobjectives/anti-staticobjectives/command-and-controlobjectives/impactmicro-behaviors/datamicro-behaviorsobjectives/collectionobjectives+18 3d
Saga Payments for WooCommerce 4.0.759 wordpress saga-payments 3 days ago

Hardcoded secrets, obfuscation, exfiltration

stealer/browserformat/css
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories